CVE-2000-1136

elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack...

CVE-2000-0080

CVE-2000-0080 describes a local-file overwrite flaw in AIX techlibss caused by a symlink attack . The vulnerability allows local users to overwrite files, with a partial integrity impact and no confidentiality or availability impact, according to the CVSS metrics ( LOCAL access; LOW complexity; N...

CVE-2000-0948

GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack...

CVE-2000-1137

GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack...

CVE-2000-0702

The CVE-2000-0702 issue affects HP-UX 11.00 (S008net.init) where the net.init rc script could be abused by a local user via a symlink attack from /tmp/stcp.conf to a targeted file, allowing overwriting of arbitrary files. The vulnerability is local and affects file integrity and confidentiality (...

CVE-2000-1135

fshd fsh daemon in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack...

CVE-2000-1136

CVE-2000-1136 affects elvis-tiny before 1.4-10 in Debian GNU/Linux (and possibly other Linux OS). The issue is a symlink attack that lets local users overwrite files of other users. Exploitation is Local with Low complexity and no authentication required; impacts include partial confidentiality, ...

CVE-2000-1137

CVE-2000-1137 affects GNU ed prior to 0.2-18.1. The issue arises from insecure temporary file handling, allowing a local user to influence files owned by others via a symlink attack in world-writable temporary directories. Consequence: potential local file overwrite or access when ed is invoked. ...

CVE-2000-0864

The CVE-2000-0864 issue affects the esound daemon used by GNOME, with versions up to and including 0.2.19. A race condition during creation of the Unix domain socket (and its accompanying world-writable /tmp/.esd directory) allows a local attacker to change permissions on arbitrary files/director...

CVE-2000-0698

Minicom 1.82.1 and earlier on some Linux systems is affected by a local file-creation vulnerability via a symlink attack that could allow a local user to create arbitrary files owned by the uucp user. The description notes the affected version and attack vector, but the documents do not provide r...

CVE-2000-0702

The net.init rc script in HP-UX 11.00 S008net.init allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file...

CVE-2000-1162

ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack...

CVE-2000-0698

Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack...

CVE-2000-0935

CVE-2000-0935 affects Samba 2.0.7: the SWAT (Samba Web Administration Tool) CGI log file is vulnerable to a symlink attack that lets local users overwrite arbitrary files. This is a local-privilege context with complete impact on confidentiality and integrity as indicated by the CVSS metrics. Sup...

CVE-2000-1162

Ghostscript before 5.10-16 is vulnerable to a local symlink attack that lets a local user overwrite files owned by others by creating predictable temporary files. The root cause involves using mktemp to create temporary files (as noted in vendor advisories), enabling file overwrites by users runn...

CVE-2000-0934

Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack...

CVE-2000-0864

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...

CVE-2000-0080

AIX techlibss allows local users to overwrite files via a symlink attack...

[SECURITY] [DSA-011-1] New version of mgetty released

Package: mgetty Vulnerability: insecure tempfile Debian-specific: no Immunix reports that mgetty does not create temporary files in a secure manner, which could lead to a symlink attack. This has been corrected in mgetty 1.1.21-3potato1 We recommend you upgrade your mgetty package immediately. wg...

CVE-2000-1136

elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack...